ハニーポット(仮) 観測記録 2019/09/03分です。
特徴
Region：AP
HiSilicon DVR Devicesの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
phpMyAdminに対するスキャン行為
いろいろなCMS製品のログインページに対するスキャン行為
を確認しました。
Region：US
HiSilicon DVR Devicesの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Pulse Secureを探索するアクセス
を確認しました。
Region：EU
ThinkPHPの脆弱性を狙うアクセス
を確認しました。
他
アクセス数推移
AP：総アクセス数：102 (前日比：+70)
US：総アクセス数：28 (前日比：+5)
EU：総アクセス数：15 (前日比：-3)
都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。
Region：AP
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 50 | 104.131.167.125 | United States |
| 1 | 113.173.6.25 | Vietnam |
| 4 | 119.29.96.254 | China |
| 4 | 123.206.175.66 | China |
| 1 | 140.148.227.212 | Mexico |
| 1 | 14.235.255.238 | Vietnam |
| 1 | 149.202.10.237 | France |
| 1 | 185.65.134.177 | Sweden |
| 1 | 186.5.206.100 | Argentina |
| 1 | 187.122.28.29 | Brazil |
| 1 | 187.188.115.89 | Mexico |
| 1 | 187.188.116.128 | Mexico |
| 1 | 187.188.160.9 | Mexico |
| 1 | 187.188.175.185 | Mexico |
| 1 | 187.188.241.149 | Mexico |
| 1 | 187.188.32.13 | Mexico |
| 1 | 187.189.94.75 | Mexico |
| 1 | 187.190.218.200 | Mexico |
| 1 | 187.190.227.126 | Mexico |
| 1 | 187.190.41.70 | Mexico |
| 1 | 187.190.60.253 | Mexico |
| 1 | 190.133.47.52 | Uruguay |
| 2 | 192.186.4.210 | United States |
| 1 | 23.129.64.204 | United States |
| 1 | 27.79.216.77 | Vietnam |
| 1 | 34.220.213.154 | United States |
| 4 | 39.135.1.158 | China |
| 4 | 39.135.1.160 | China |
| 4 | 49.232.65.126 | China |
| 1 | 52.10.240.92 | United States |
| 1 | 54.183.250.84 | United States |
| 3 | 89.248.174.219 | Seychelles |
| 3 | 94.230.208.147 | Switzerland |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 21 | - |
| 5 | Go-http-client/1.1 |
| 1 | Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| 2 | Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) |
| 1 | Mozilla/5.0 |
| 3 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0b8) Gecko/20100101 Firefox/4.0b8 |
| 1 | Mozilla/5.0 (Macintosh; PPC Mac OS X; U; en; rv:1.8.1) Gecko/20061208 Firefox/2.0.0 |
| 1 | Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; it; rv:1.9.2.22) Gecko/20110902 Firefox/3.6.22 |
| 1 | Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1 |
| 15 | Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6) |
| 50 | Python-urllib/2.7 |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | - | ||
| 1 | GET | //administrator | HTTP/1.1 |
| 1 | GET | /administrator/ | HTTP/1.1 |
| 1 | GET | /blog/wp-login.php | HTTP/1.1 |
| 1 | GET | /Blog/wp-login.php | HTTP/1.1 |
| 1 | GET | /cgi-bin/hi3510/getidentify.cgi | HTTP/1.1 |
| 1 | GET | /cgi-bin/php5 | HTTP/1.1 |
| 1 | GET | /cgi-bin/php | HTTP/1.1 |
| 3 | GET | /cgi-bin/webctrl.cgi?action=tree_page | HTTP/1.1 |
| 1 | GET | /cms/administrator | HTTP/1.1 |
| 1 | GET | /cms/ | HTTP/1.1 |
| 1 | GET | /drupal/ | HTTP/1.1 |
| 1 | GET | /.env | HTTP/1.1 |
| 1 | GET | /.git/config | HTTP/1.1 |
| 1 | GET | /.git/index | HTTP/1.1 |
| 1 | GET | /jenkins/script | HTTP/1.1 |
| 1 | GET | /jmx-console | HTTP/1.1 |
| 1 | GET | /joomla/administrator | HTTP/1.1 |
| 1 | GET | /Joomla/administrator | HTTP/1.1 |
| 1 | GET | /login | HTTP/1.1 |
| 1 | GET | /manager/html | HTTP/1.1 |
| 17 | GET | ../../mnt/custom/ProductDefinition | HTTP |
| 1 | GET | /msd1.24.4 | HTTP/1.1 |
| 1 | GET | /msd1.24stable | HTTP/1.1 |
| 1 | GET | /msd | HTTP/1.1 |
| 1 | GET | /myadmin | HTTP/1.1 |
| 1 | GET | /myadmin/ | HTTP/1.1 |
| 1 | GET | /mysqldumper | HTTP/1.1 |
| 1 | GET | /mySqlDumper | HTTP/1.1 |
| 1 | GET | /MySQLDumper | HTTP/1.1 |
| 2 | GET | /mysql | HTTP/1.1 |
| 2 | GET | /mysql/ | HTTP/1.1 |
| 1 | GET | /.o3mJzT | HTTP/1.1 |
| 1 | GET | /phpMyAdmin-4.2.1-all-languages | HTTP/1.1 |
| 1 | GET | /phpMyAdmin-4.2.1-english | HTTP/1.1 |
| 2 | GET | /phpmyadmin | HTTP/1.1 |
| 2 | GET | /phpmyadmin/ | HTTP/1.1 |
| 1 | GET | /phpMyAdmin | HTTP/1.1 |
| 1 | GET | /script | HTTP/1.1 |
| 1 | GET | /shell?busybox | HTTP/1.1 |
| 2 | GET | /sql | HTTP/1.1 |
| 1 | GET | /sqlite/main.php | HTTP/1.1 |
| 1 | GET | /SQlite/main.php | HTTP/1.1 |
| 1 | GET | /SQLiteManager-1.2.4/main.php | HTTP/1.1 |
| 1 | GET | /sqlitemanager/main.php | HTTP/1.1 |
| 1 | GET | /SQLiteManager/main.php | HTTP/1.1 |
| 1 | GET | /SQLite/SQLiteManager-1.2.4/main.php | HTTP/1.1 |
| 1 | GET | /status?full=true | HTTP/1.1 |
| 5 | GET | /TP/index.php | HTTP/1.1 |
| 5 | GET | /TP/index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 | HTTP/1.1 |
| 5 | GET | /TP/public/index.php | HTTP/1.1 |
| 1 | GET | /typo3/phpmyadmin | HTTP/1.1 |
| 1 | GET | /webadmin | HTTP/1.1 |
| 1 | GET | /webdav | HTTP/1.1 |
| 1 | GET | /wordpress/wp-login.php | HTTP/1.1 |
| 1 | GET | /Wordpress/wp-login.php | HTTP/1.1 |
| 1 | GET | //wp-login.php | HTTP/1.1 |
| 1 | GET | /wp/wp-login.php | HTTP/1.1 |
| 1 | GET | /xampp/phpmyadmin | HTTP/1.1 |
| 3 | OPTIONS | / | HTTP/1.1 |
| 5 | POST | /TP/index.php?s=captcha | HTTP/1.1 |
Region:US
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 10 | 101.89.197.199 | China |
| 1 | 128.14.134.134 | United States |
| 1 | 14.161.222.93 | Vietnam |
| 1 | 187.188.33.136 | Mexico |
| 1 | 187.189.224.128 | Mexico |
| 1 | 187.190.116.252 | Mexico |
| 2 | 187.190.227.44 | Mexico |
| 2 | 47.244.5.202 | China |
| 1 | 54.183.250.84 | United States |
| 1 | 77.247.110.69 | Estonia |
| 1 | 82.64.24.61 | France |
| 1 | 84.22.134.112 | Russia |
| 2 | 89.248.174.219 | Seychelles |
| 3 | 92.63.194.11 | Russia |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 14 | - |
| 1 | Go-http-client/1.1 |
| 2 | Mozilla/5.0 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36 |
| 1 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 |
| 9 | Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6) |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 1 | GET | /cgi-bin/webctrl.cgi?action=tree_page | HTTP/1.1 |
| 1 | GET | /elrekt.php | HTTP/1.1 |
| 1 | GET | /html/public/index.php | HTTP/1.1 |
| 1 | GET | /index.php | HTTP/1.1 |
| 1 | GET | /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1]=1 | HTTP/1.1 |
| 1 | GET | /login.html | HTTP/1.1 |
| 7 | GET | ../../mnt/custom/ProductDefinition | HTTP |
| 1 | GET | /public/index.php | HTTP/1.1 |
| 1 | GET | /secure/ContactAdministrators!default.jspa | HTTP/1.1 |
| 1 | GET | /shell?busybox | HTTP/1.1 |
| 1 | GET | /thinkphp/html/public/index.php | HTTP/1.1 |
| 1 | GET | /TP/html/public/index.php | HTTP/1.1 |
| 1 | GET | /TP/index.php | HTTP/1.1 |
| 1 | GET | /TP/public/index.php | HTTP/1.1 |
| 1 | GET | /webdav/ | HTTP/1.1 |
| 1 | HEAD | /robots.txt | HTTP/1.0 |
| 1 | OPTIONS | / | HTTP/1.1 |
| 1 | POST | /index.php?s=captcha | HTTP/1.1 |
| 1 | PROPFIND | / | HTTP/1.1 |
| 3 | \x03 |
Region:EU
送信元IPアドレス一覧
| 件数 | 送信元IPアドレス | 国 |
|---|---|---|
| 1 | 149.202.10.237 | France |
| 10 | 49.51.137.62 | China |
| 1 | 54.193.110.133 | United States |
| 1 | 61.219.11.153 | Taiwan |
| 1 | 77.247.110.69 | Estonia |
| 1 | 89.248.174.219 | Seychelles |
UserAgent一覧
| 件数 | UserAgent |
|---|---|
| 4 | - |
| 1 | Go-http-client/1.1 |
| 1 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36 |
| 9 | Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6) |
リクエスト内容一覧
| 件数 | Method | Request | Protocol |
|---|---|---|---|
| 2 | - | ||
| 1 | GET | /cgi-bin/webctrl.cgi?action=tree_page | HTTP/1.1 |
| 1 | GET | /elrekt.php | HTTP/1.1 |
| 1 | GET | /html/public/index.php | HTTP/1.1 |
| 1 | GET | /index.php | HTTP/1.1 |
| 1 | GET | /index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=1 | HTTP/1.1 |
| 1 | GET | /public/index.php | HTTP/1.1 |
| 1 | GET | /thinkphp/html/public/index.php | HTTP/1.1 |
| 1 | GET | /TP/html/public/index.php | HTTP/1.1 |
| 1 | GET | /TP/index.php | HTTP/1.1 |
| 1 | GET | /TP/public/index.php | HTTP/1.1 |
| 1 | HEAD | /robots.txt | HTTP/1.0 |
| 1 | OPTIONS | / | HTTP/1.1 |
| 1 | POST | /index.php?s=captcha | HTTP/1.1 |
